| Lecture | Date | Topic | Recommended reading |
|---|---|---|---|
| 1 | 19.08 | Introduction to cryptography, historical ciphers, perfect privacy, one-time pad, probability theory | First Chapter 1 in [BR] then Chapter 1 in [Ros]. See Appendix A in [Ros] for a refresher on probability theory. |
| 2 | 26.08 | Block ciphers, PRF/PRPs, AES | Chapter 4, 6, and 7 in [Ros] (4.3-4.5, 6.4-6.5 and 7.3-7.4 can be skipped) |
| 3 | 02.09 | Symmetric encryption, IND-CPA, CTR/CBC-mode | Chapter 8 in [Ros] (8.1.2 can be skipped) |
| 4 | 09.09 | MACs, UF-CMA, CBC-MAC, CMAC, variable-input length PRFs | Chapter 7 in [BR] (7.8 can be skipped) + Section 9.1 and 9.4 in [Ros] |
| 5 | 16.09 | Authenticated encryption, IND-CCA, AEAD, GCM-mode | Chapter 9 in [Ros] |
| 6 | 23.09 | Hash functions, SHA1/SHA2, HMAC | Chapter 10 in [Ros] |
| 7 | 30.09 | Randomness and entropy, random number generators, PRNGs, stream ciphers Midterm exam available in Canvas | Chapter 5 in [Ros] https://sockpuppet.org/blog/2014/02/25/safely-generate-random-numbers/ |
| 8 | 07.10 | Group theory, Diffie-Hellman key exchange | Chapter 13 in [Ros] |
| 9 | 14.10 | Diffie-Hellman II, elliptic curves, computational aspects Midterm exam submissions due (23:59) | Chapter 13 in [Ros] |
| 10 | 21.10 | KEMs, IND-CPA/IND-CCA, ElGamal | Chapter 14 in [Ros] (14.4 can be skipped) |
| 11 | 28.10 | Digital signatures, UF-CMA, Schnorr, PKI | Chapter 16 + Chapter 19 in [Ros] (16.2 + 19.3 can be skipped) |
| 12 | 04.11 | Quantum computers, Shor's algorithm | Section 20.1 in [Ros] |
| 13 | 11.11 | LWE, ML-KEM | Section 20.2 and 20.3 in [Ros] Chapter 4 in [Men] |
| 14 | 18.11 | SIS, ML-DSA | MIT - 6.5610 Lecture Notes Chapter 3 + 7 in [Men] |
| 15 | 25.11 | Course recap and going through old exams. |
[Ros] Mike Rosulek. The Joy of Cryptography. 2026.
[BR] Mihir Bellare and Phillip Rogaway. Introduction to Modern Cryptography. 2005.
[Men] Alfred Menezes. Lattice-Based Cryptography. 2026. Lecture notes: A Gentle Introduction to Lattice-Based Cryptography. https://cryptography101.ca/wp-content/uploads/lattice-based-cryptography.pdf
.